bga_3_apt saldÄ±rÄ±larÄ± karÅÄ±sÄ±nda gÃ¼venlik sistemlerin yetersiziliÄi

7/25/2019 bga_3_apt saldrlar kar snda gvenlik sistemlerin yetersizili i

1/34

!"#$$%$ '() *+,"-."/" 0 12+3-45. 67' 869:79 7;9 '?'@*A9B9C D67'EFGAE)H

I5J$%K$ L=':

6".M" 7NO$-."/" '?'@*A9B9

I5J$%K$EP-3.Q4M3ERPSE+#

'() B3.TU#U.3#U ?3#VU2U-T3 7NO$-.",B"2+$S.$#"-"- W$+$#2"J."/"


2/34

!"#$$%$ '() *+,"-."/" 0 12+3-45. 67' 869:79 7;9 '?'@*A9B9C D67'EFGAE)H

!"#$$%$ '() *+,"-."/" 0 12+3-45. 67' 869:79 7;9 '?'@*A9B9C D67'EFGAE)H

!"#$%&$ ()*+

,-./- 012$3.-4- 563789637 : *4 012$3.-4-

*;687 Q67' ?$3$@;6AB3 C$>@$;

D4-@9$3

,-./- 012$3.-4- *E*5DFGHG

+-3"I *E*5DFG

(4;$A9 0J;$2.->-

,-./- K ,6LM$8$L-; N3-2$;>-@$>-

,.B//$; O PPPQ.-&$B2$;-RQ3$@


3/34

!"#$$%$ '() *+,"-."/" 0 12+3-45. 67' 869:79 7;9 '?'@*A9B9C D67'EFGAE)H

!"#$$%$ '() *+,"-."/" 0 12+3-45. 67' 869:79 7;9 '?'@*A9B9C D67'EFGAE)H

*96M

013191# /12$3.-S R;BT.$9.$;-3-3 @$9$.-3-

B."8@";63 >B3 S"..637=7 &6;S73U6.7S $S>-S.-4- 2$ #6;6;.7%6#7.79.6; S6;87>73U6 V-;$P6..KW?HK*3A2-;1> /-T-

S.6>-S >-T$; /12$3.-S >->@$9.$;-3-3 %$@$;>-#.-4-3-3

63.687.96>7Q


4/34

!"#$$%$ '() *+,"-."/" 0 12+3-45. 67' 869:79 7;9 '?'@*A9B9C D67'EFGAE)H

!"#$$%$ '() *+,"-."/" 0 12+3-45. 67' 869:79 7;9 '?'@*A9B9C D67'EFGAE)H

XX Y%6;7 XX

65 25-5ST3 M$X$- +NS P.3%.3# O$ $,#3-MY#N-+N.$#"-"- M$#X$, ,"V".$#.$ ".M"2" %P,+5#Z 23-3.

TN-%3T3- 3.U-SUV[#E


5/34

!"#$$%$ '() *+,"-."/" 0 12+3-45. 67' 869:79 7;9 '?'@*A9B9C D67'EFGAE)H

Z[ H$3$ (3=$ H-T$; 513%6


6/34

!"#$$%$ '() *+,"-."/" 0 12+3-45. 67' 869:79 7;9 '?'@*A9B9C D67'EFGAE)H

!"#$$%$ '() *+,"-."/" 0 12+3-45. 67' 869:79 7;9 '?'@*A9B9C D67'EFGAE)H

0$.$3$S>$. 012$3.-S \6S.68797

)$@PB;S] -8.$A9 >->@$9- 2$ >$;2-> /12$3.-4-

^B"@$;_*`+a] V-;$P6.. W3@;">-B3 5$@$=AB3 H%>@$9

W3@;">-B3 ?;$2$3AB3 H%>@$9

QQQQ

,1@M$3-3 @6969736 %6S737 >@63U6;@ >62"396>->@$9.$;- -M-3 6%;7.7;Q

E"..637=7.6;6 %J3$.-S @$LU-@ /$3$..-S.$ $> /$M-.-;

bQQQc3"3 #6@$3 &6;S73U6%7#d %6S.68797

0$;M$S.$8A;-.$3 /12$3.-S @$>@.$;- SB3@;B. .->@$>-3U$S-T-; 96UU$%- U6L6 /$M$T-.9$S -M-3 %6R


7/34!"#$$%$ '() *+,"-."/" 0 12+3-45. 67' 869:79 7;9 '?'@*A9B9C D67'EFGAE)H!"#$$%$ '() *+,"-."/" 0 12+3-45. 67' 869:79 7;9 '?'@*A9B9C D67'EFGAE)H

[email protected] 012$3.-S F-96;->-_ea

012$3.-S 1;13.$;- .->@$>-

012$3.-S U"26;7 H6.U7;7 C$>R-@ 2$ D3/$..$9$ H->@$9-

*3A2-;1>] *3A>R69] *3Af

)*`] g[hQZI MJ#191 5+?

012$3.-4-3 6;@96>7 R6;6 L6;=696 -.$

UB4;" B;63-3- %63.78

63.696



HB;".6;.6 012$3.-4-9-#f

E6M S-8-KS";"9 >B3 T-; %7. -M$;->-3U$ *?C T$3#$;-

>Bi>AS$ T-; >6.U7;7%6 96;"# S6.U7 56L6 U6 J3$9.->- S6M S-8-KS";"9 T" >6.U7;7%6 96;"#

S6.U74737 @$>R-@ $j 2$ 36>7.K3$ #6963e

56L6 T3\3 T3 J3$9.->- S6M S";"9 T" AR >6.U7;7%.6S6;87 S6;87%6 S6.U7473U63 L6T$;>-#e

,0*kU63 J;3$S.$;-f

E69" K (#$. >$S@J;



*?C E62;697

*Q?QC _*U263=$U ?$;>->@$3@ CL;$6@a h[Z[ %7.73U6

/13U$9-9-#$ /-;9-8 b/J;$=$ B.6;6Sd %$3- T-; SB3"Q \$3- 6;6%78.6; 2$ >$S@J;$ L$%$=63 S6@96S 696=7%.6

/$.-8A;-.9-8 T-; SB3" 9"e

lBS U6L6 J3=$>-3U$3 26;B.63 &6S6@ %$@$;- S6U6; J3$92$;-.9$%$3] T1%1S i;96.6;7 L$U$& 6.73U7473U6 /$;M$SJ3$9- B;@6%6 M7S63 T-; SB3" 9"e

C$S3-S B.6;6S $>S- %J3@$9.$;] %$3- 9BA26>%B3.6;

012$3.-S=-.$;-3 [Om %$3-S T68.6U747 T-; S62;69



*?C -.$ F1=6U$.$

*?C SB.6% @6379.636T-.-; T-; SB3" B.96U747 -M-3

91=6U$.$>- U$ #B;U";] F1=6U$.$U$ $3 J3$9.- L">"> S-9$ S6;87 3$%-3

91=6U$.$>-3-3 2$;-.U-4-U-;

H6.U7;/63 /-T- U1813$T-.9$S 2$ B3.6;73 %$@$3$S.$;-3->-9".$ $@9$S L6%6A J3$9$ >6L-RA;Q

C6379.636T-.-; @$LU-@.$;- $3/$..$9$S SB.6%U7;

!6@6n EB.6% @6379.636T-.-; B.96%63 ;->S.$;- $>S-963



*?C H6.U7;7 *36@B9->-

?3%-3,] HB' MNOE ,P-K$#3-2U



*?C \6869 5J3/1>1!3J ',^O"+$ @$+3%.3#

1E

!3J E$8-&] L$U$& T$.-;.$9$ !$U$i3 2$ L$U$&$ ".687.6T-.$=$S %B..6;73@$>R-@ $U-.9$>-

11E !3J [email protected] $ORB>@6>7373/J3U$;-.9$>-

0$3$..-S.$ T" %J3@$9 @$;=-L $U-.-; _SB.6%]#6L9$@>-# 2$ 6# @$S3-S U$@6%/$;$SA;U-4-3U$3a

111E !3J !$U$p$ -;AT6@6 /$M9$ !$U$& >->@$9$ 6;S6 S6R7 %1S.$9$

1$.@9$] L$U$&6.63737 /$3-8.$@9$

!$U$& >->@$9U$ U6L6 %1S>$S %[email protected] S"..637=7L6S.6;736 /$M-8] &6;S.7 64.6;7 S$8-&

->@$9U$3 -./-.- 2$;-.$;-3 8-&;$.$3$;$S

U786;7 M7S6;7] %$U$S.$39$>-

@$3-.U-4-3U$ @$S;6; T64.637.6T-.$=$S T-;%6R7%7 S";"R ] .B/.6;73 2$ U-4$; U$.-..$;-3>-.-39$>-Q



*?C FBA26>%B3" 2$ *SM$.- G8.$;

*?C >6.U7;7.6;73U6 $3 J3$9.- T-.$8$3 >6.U7;/6373

9BA26>%B3"U";Q ," 9BA26>%B3 /$3$..-S.$ 96UU- S6;87.7S%B3 U";"9"36 /J;$ *?C >6.U7;7>7

Z /13 U$ >1;$T-.-; q %7. U6 >1;$T-.-;Q [ U6% $IR.B-@ M7S96>7 -M-3 T$S.$3$3 >1;$ 2Q>

!6=S.$3$3 mQ R6;A %6#7.7973 /13=$..$39$>-3- T$S.$9$



C1;S-%$kU$3 G>@6A>AS.$;



[email protected] *?C \6S.6879.6;7f

,-#$ T-;8$% B.96# %6S.68797

H6.U7;/63 T".6 T".6 T-#- 9- T".6=6S!

H6U$=$ 1;13.$ MJ#9$%$ M6.7896S

H6U$=$ 64 @;6i4- U-3.$%$;$S MJ#9$%$ M6.7896S

V6;S73U6.7Sr*?C 1;131r.B/ %J3$A9-rBs>$=



(;3$S *?C H$36;%B G3=$.$9$.$;-

_ `



H$36;%BOW

H$T$RnV6;S73U6.7S 2$ >B3 S"..637=7 /12$3.-S

J3.$9.$;-3-3 %$@$;>-# B.96>7 !-S6%$n H6.U7;/63 -R>$= o?) S"..6363 i;96.6;7 L$U$&

6.6;6S $;-8-9 T-./-.$;-3- @BR.6%6;6S T"3.6;7 >6@96S

->@$;Q ,"3"3 -M-3 T-; 6U$@ @"#6S >->@$9 S";6; _S";".">->@$9- L6=S.$;a 2$ 6;696 9B@B;.6;7 >B3"M.6;736

/12$3$3 >B3 S"..637=7.6;7 62.696%6 T68.6;Q

01313 >B3"3U6 T68.6U747 %$;U$3 T-; 9-. J@$U$ L-ML$>6T6 S6@96U747 i;96.6;73 -M 64.6;736 $;-8-RL6>>6> M-#-9.$;- T68S6.6;736 R6;6 S6;87.7473U6 >6@6;



H$36;%B -3@$;3$@ 1#$;-3U$3 T-; $I$ UB>%6>7373

-3U-;-.9$>- -.$ T68.6; W3@$;3$@ 1#$;-3U$3 $I$ %6>6S.636T-.-; _ea

H$36;%BU6S- Q$I$ %$;-3$ QRU&] Q#-R] I.>] QUB= 2$

T$3#$;- "#63



E$8-&] ,-./- CBR.696 2$ C"#6S *U797

H6.U7;/63 0BB/.$ S"..636;6S o?) ->@$9=->- 6;66%&6U6 M7S63 .-3S$ 6%6;736 R;B/;697 S";6; 2$ o?) T64.63737

T68.6


20/34

!"#$$%$ '() *+,"-."/" 0 12+3-45. 67' 869:79 7;9 '?'@*A9B9C D67'EFGAE)H!"#$$%$ '() *+,"-."/" 0 12+3-45. 67' 869:79 7;9 '?'@*A9B9C D67'EFGAE)H

G.S *U79 tB;."S.6;7

0BB/.$kU6 -.S >6%&6U6 M7S63 >->@$9-3 L6=S.$39$>-

HH+ L$6;@T.$$U 6M7S.747 >B3;6>7 U";"9

G.S >6%&6U6 M7S63 >->@$9 L6=S.$3$9-%B;>6 %$3- T-;>-@$ S";"R ,.6=S H$B %J3@$9.$;- -.$ -.S >6%&6%6

6.7396>7 !$9$3 L$; /13 %$3- /12$3.-S #6i%$@.$;- %6%73.637;


21/34


o?) G>@$9=- ?;B/;69736 *;S6 S6R7 \$;.$8A;9$

9>&R6%.B6U P-3UBP>K9$@$;R;$@$;K;$2$;>$u@=R

+!cHCvZwhQZxgQhQZ[x ^ y 9>&$3=BU$ O@ $I$ OI@$9R.6@$uIgxuP-3UBP>Q$I$ OS OB 3@uT6=SUBB;Q$I$ O

$ IgxK>L-S6@6u/6u36- O= z


22/34


*3AO_o-;">KF6.P6;$Kfa *@.6@96 (#$..-4- DS.$9$

E.6>-S /12$3.-S SB;"96.6;7 *>R-;-3 /-T-U-;Q ,-.-3$3 T6>-@

U";"9.6; -M-3 -8$ %6;6;Q N;$A.$3 #6;6;.7 %6#7.79.6;73 {g[ =-26;7373 %6869 >1;$>- m

>66j;Q ,"3"3 -M-3U$ @$S S"..6379.7S 96.P6;$ B;637{|[kU-;Q


23/34


*ok.$; C6;6}3U63 C637396# t6;6;.7 c."8@";96


24/34


(;3$S Y%/".696 l7S7


25/34


,$S.$9$ H1;$>-

*?C >6.U7;7.6;73U6 $3 J3$9.- L">">.6;U63 T-;-

>6.U7;/6373 6=$.$>-3-3 B.9696>7U7;Q H6.U7;/63 64737 L6#7;.6;] S";6; 2$ "#"3 T-; >1;$

T$S.$;Q

(;3$S >$36;%BU6 x 6% =-26;73U6 T-; T$S.$9$ >1;$>-B.U"4" @$>R-@ $U-.9-8A;Q


26/34


!6>>6> ,-./-.$;-3 D.U$ DU-.9$>-


27/34


VC? D;-8-9- 2$ VC?kU$S- 5B>%6.6;6 *;S6 E6R7 \$;.$8A;9$

H6.U7;/63 $.U$ $j4- $;-8-9 T-./-.$;-3- S"..636;6S VC?

>"3"="%6 T64.637; 2$ VC? >"3"="U6 $3 >B3 /13=$..$3$3UB>%6.6;7 -3=$.$%$;$S B;~-36..$;-3- 6;S6 S6R7.7>1;19.$;-%.$ U$4-8A;-;Q

m /13 >B3;6 -R 6U;$>- Q%Q#[email protected] T-; ->@$9=-3-3 9$;S$#-SB9"@6 >->@$9-3$ T64.63U74737 /J;1;Q

!7#.7=6 -./-.- S"..637=7373 T-./->6%6;736 $;-8-9 >64.6;

,-./->6%6; i;96373 L$.R U$>S T-;-9- M6.7863736 6-j; 2$$3 %[email protected] S"..637=7 L$>6T7 T-./->6%6;6 .B/-3 B.9"8@";Q

,$..$S UJS191 %6R6;6S R6;B.6373 6M7S L6.- $.U$ $U-.-;


28/34


H"3"=" C6;6p7 T-; *?C

H6.U7;/63 MBS T-.-3$3 T-; T.B/K=9> >->@$9-3-3

C1;S-%$ >-@$>-3- L6=S.$; ?6;B.6 @6L9-3-

,-; >B3;6S- >1;19 -M-3 #6963 >6%6; 2$ %$3- >1;19M7S-@$%$ $S.$3$3 %$3- C1;SM$ >1;19UB>%6.6;7 -M-3$ T-; 6U$@ 6;S6 S6R7 T6;73U7;63 RLRUB>%6>7 $S.$;] L6>L U$4$;.$;-3- U$4-8A;-;Q

,-; L66 >B3;6 -./-.- UB>%6373 UBP3.B6U >6%7>7

Z|mQ[[[ B.9"8@";Q H6.U7;/63 @$S T-; L6;$S$A -.$ Z|mQ[[[ >->@$9$ 6;S6

S6R7 T7;6S7;Q


29/34


*R@ U$269f

H"3"=" .B/.6;73U63 -./-.- UB>%6.6;7 -3U-;$3 -R

6U;$>.$;- @$>R-@ $U-.-R L63/-.$;-3U$ T.B/ %6#7.797S";"." T$.-;.$3-; 2$ 6;S6 S6R7.6;73 L63/- >->@$9.$;U$

B.U"4" @$>R-@ $U-.-;Q

*;S6 S6R7 1#$;-3U$3 >"3"=" $.$ /$M-;-.-; -3UBP> "#$;-3U$ *R6=L$ *U9-3 L6S.6;7 -.$

M6.7896S@6U7;

5Ft TJ./$>-3U$S- U-/$; >"3"=".6;6 ?6>>CL$ !6>L%J3@$9- -.$ $;-8-9 >64.637; 2$ 2$;-@6T637

>"3"=">"3U63 %$;$. 646 $;-8-.-;f

(


30/34


C1;S-%$kU$3 (;3$S *?C C$>A 2$ HB3"="

V-;96 -.$ 63.6896 %6R7.7;

0-#.-.-S >J#.$89$>-3U$ /$M$3 i;96 ->9- L6;-M L-M T-./-6.7396978%6. 64 >-@$.$;-3U$3 6;686%&6.6;7 @6S-R $U-.$;$SS69R63%6KU"%";" #69637 T$S.$3-;Q

E69R63%6 -.$ -./-.- >-@$%$ T$3#$; 6.63 6U7 6.736;6S H?V

S6%[email protected];7] F S6%[email protected];7 /-;-.-; 2$ >6L@$ $ORB>@6 L6#7;.637;Q

z[ M6.78636 $ORB>@6 /J3U$;-.-; 2$ T$S.$9$%$ 6.737;Q


31/34


W.S Z[ U6S-S6 -M-3U$ | S"..637=7 >->@$9$ $;-89$%$ M6.787;Q

!7#.7=6 S"..637=7.6;73 L$>6R T-./-.$;- S"..637.6;6S P$T96-.>->@$9-3$ $;-8-9 >64.637; C19 S"..637=7 T-./->- 6.737; _T64.7 B."363 T-;-9 2$ @$.

3"96;6.6;7 U6L-.a

*36L@6; S$.-9$ 6;696>7 /$;M$S.$8A;-.-; _QR=&a ,-; 6U$@ 2R3 =B3i/ 2$ ">$;KR6>> $.U$ $U-.-;

oR3 S";"."9" -=-3 /$=$ [mn[[ T$S.$3-;

o?) S";"."; %$;$. 646 T64.63< >64.637;] ^5? 1#$;-3U$3R6;B.6>7 6.7363 T-./->6%6;6 T64.637.7;Q

*o U";U";".U"] S6.7=7 6;S6 S6R7 %1S.$3U-] %$;$. 64RB;@.6;7 @6;63U7 5, T"."3U"] $;-8-9 >64.63U7f

(


32/34


E";"96 (U$2

C$>@.$;- @6969.6U7S@63 >B3;6 >6.U7;7 @$>R-@ 2$

$3/$..$9$ >->@$9-3- "%6;6=6S [email protected] >6L@$ [email protected];U1#$3.$3U-Q

E";"96 T-; L66 -M$;->-3U$ /$;M$S.$8A;-.$3 >-T$;

>6.U7;7 >-9".6>%B3" >B3"="3U6 $.U$S- T"./".6;7>B;".U"

W?H .B/.6;7 L6;-= $..$ @"@"."; L-=T-; T-./- /$.9$U-Q

E7>6=6>7 S";"9 %6R7 S6;87>73U6 S$3U->-3->62"3696%6=64737 /J;U1f


33/34


HB3"M

H-T$; U13%6U6 /12$3.-4-9-# >6U$=$ T-#$ 2$

>737;.6;797#6 T64.7 U$4-.U-;Q (#$..-S.$ L-#9$@ 6.7363 mQ R6;A i;96.6; 2$ T"3.6;73

$;-8-9.$;-K%$@S-.$;- T1%1S R;BT.$9U-;Q

W3@$;3$@ 1#$;-3U$3 $.U$ $U-.$3 2$%6 %$;$. 64U6UB.6879U6 B.63 L$; @1; M6.78%6SB3@;B.U$3 /$M9$.-Q

*?C @$S3-S T-; R;BT.$9U$3 J@$ -8 U13%6>737-./-.$3U-;$3 L6>>6> T-; SB3"U";Q

G


34/34

G.$A8-9 ,-./-.$;-

PPPQ.-&$B2$;-RQ3$@

,.B/QT/6Q=B9Q@;,.B/

T/6>$=";-@% L"#$%&$B36.CP-$;

L"#$%&$.-&$B2$;-RQ3$@

!"#$%&$QB36.T/6Q=B9Q@;G.$A8-9

bga_3_apt saldÄ±rÄ±larÄ± karÅÄ±sÄ±nda gÃ¼venlik sistemlerin yetersiziliÄi

Documents

Transcript of bga_3_apt saldÄ±rÄ±larÄ± karÅÄ±sÄ±nda gÃ¼venlik sistemlerin yetersiziliÄi